ubuntu-x-swat team mailing list archive

[Bryce Harrington <bryce@xxxxxxxxxxxxxxxxxxx>]

** Description changed:

  Binary package hint: xorg
  
  The attached (unsigned) java applet, if started in an xnest X server,
  reliably crashes that xnest server, at least for me. When started on the
  "real" X server, it caused severe display corruption and X basically
  froze. The system stayed somewhat responsive (the mouse freezed for a
  couple of seconds, but sporadically it moved again). Switching consoles
  worked, but only during the times when the mouse cursor was responsive.
  Restarting X fixed the problem the first time I tried, but the second
  time a full reboot (complete with unplugging the power cable) was
  required to get the system back. X apparently didn't produce any core
  dump, probably because it stayed active enough to be terminated
  normally.
  
  How to reproduce: Run the applet. Firefox worked for me, and so did
  Sun's applet viewer. The applet was generated by Processing, and running
  the sketch in Processing also worked. Sometimes it's necessary to create
  a new window (an xterm will do, or any right mouse button popup,
  including the window manager's popups). If you opened it in an Xnest
  instance, that Xnest should close and spit out this error:
  
  X Error of failed request:  BadDrawable (invalid Pixmap or Window parameter)
    Major opcode of failed request:  70 (X_PolyFillRectangle)
    Resource id in failed request:  0x0
    Serial number of failed request:  3646
    Current serial number in output stream:  3647
  
  If you ran the applet on the real X server, you should see display
  corruption. The Xorg.0.log.old that ubuntu-bug hopefully attached was
  generated by the "crashing" server.
  
  This looks a lot like memory corruption (note that the applet renders
  the "foobar" string at position (0,0), that is, above the top border of
  its window because the coordinates specify the bottom-left corner of the
  text), and a java applet shouldn't be able to crash the X server anyway,
  so I'm tagging this as a security problem.
  
  My system has compiz running, and some of the corruption was clearly
  compiz-related (corrupted shadows and such), but Xnest crashes with
  nothing but the applet viewer running in it, no window manager or
  anything. I'll probably try this on different hardware and see how
  reliably it works (a friend also had display corruption resulting from
  Processing).
  
  ProblemType: Bug
  Architecture: i386
  DistroRelease: Ubuntu 9.04
  NonfreeKernelModules: nvidia
  Package: xorg 1:7.4~5ubuntu18
  ProcEnviron:
   PATH=(custom, user)
   LANG=de_DE.UTF-8
   SHELL=/bin/bash
  ProcVersion: Linux version 2.6.28-13-generic (buildd@vernadsky) (gcc version 4.3.3 (Ubuntu 4.3.3-5ubuntu4) ) #45-Ubuntu SMP Tue Jun 30 19:49:51 UTC 2009
  SourcePackage: xorg
  Uname: Linux 2.6.28-13-generic i686
+ 
+ [lspci]
+ 00:00.0 Host bridge [0600]: Intel Corporation Mobile 4 Series Chipset Memory Controller Hub [8086:2a40] (rev 07)
+     	Subsystem: Samsung Electronics Co Ltd Device [144d:c042]
+ 01:00.0 VGA compatible controller [0300]: nVidia Corporation GeForce 9200M GS [10de:06e8] (rev a1)
+     	Subsystem: Samsung Electronics Co Ltd Device [144d:c042]

-- 
java applet crashes x server
https://bugs.launchpad.net/bugs/397976
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to nvidia-graphics-drivers-180 in ubuntu.